This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json) Hash identifier: AwA6gOe6toCth41fHN2U06veEUZ4QzuUcvwDNRVAB3g= Subject key identifier: E2:31:21:5C:DB:32:73:B5:31:86:C4:DC:E9:35:27:41:EB:01:C1:BE Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Certificate serial: 019B3BA28117FCB1C8DEF309A720481289F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft Manifest number: 0266 Signing time: Sat 20 Dec 2025 12:01:04 +0000 Manifest this update: Sat 20 Dec 2025 12:01:04 +0000 Manifest next update: Sun 21 Dec 2025 12:01:04 +0000 Files and hashes: 1: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: DfxlqHqznHyJXnTy0bGdaeXipeCIo38u7Tbl1eaEGmA=) 2: us8vS6jTclCEmBfDUU3o3m6Yn-k.roa (hash: mAUclWVBVl5pM/tgk/IIx+fX18hAwqFUbm2hLAhaOL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:81:17:fc:b1:c8:de:f3:09:a7:20:48:12:89:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Validity Not Before: Dec 20 12:01:04 2025 GMT Not After : Dec 21 12:01:04 2025 GMT Subject: CN=e231215cdb3273b53186c4dce9352741eb01c1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:93:49:44:ff:7b:3e:8d:a5:d8:9b:f2:c8: 12:f6:f3:fd:6b:52:19:c1:0e:b7:42:79:eb:3b:ca: ef:fe:b0:9d:f3:14:bf:bc:95:6a:de:7b:f5:51:3c: c8:66:39:7d:e9:ac:81:55:04:97:42:84:8e:e5:67: 2f:cf:ac:be:88:a1:6d:07:d2:8f:ca:0b:d4:99:e6: c8:10:bf:96:aa:c8:77:7d:16:7b:c7:15:b2:c5:1f: 7f:42:3f:fc:e0:f4:7c:fe:79:9a:e0:4e:ef:a2:db: fd:3b:c5:64:56:ac:36:b5:9e:8e:de:dd:44:dc:fe: 34:0a:ce:ad:78:59:e1:9f:a8:6e:ab:a5:3f:f7:9e: f8:18:71:57:e1:82:70:18:99:bb:5c:f6:e4:80:8e: 0a:8c:6f:39:1b:4d:2a:47:48:66:3e:2c:cf:3c:4e: 6d:b9:fb:f7:92:e8:5a:26:59:30:fe:a8:01:eb:e3: 51:19:6d:4d:2e:2f:3a:69:fe:3c:50:95:c6:a0:8f: 80:e8:c9:ee:a9:95:cb:d8:31:32:d8:0c:8f:c8:45: 91:bb:2b:89:b4:15:70:5a:18:a5:8e:ca:93:e9:08: 96:26:80:52:4a:49:37:0e:40:b5:fc:49:25:ff:2d: 4d:88:74:50:c1:31:a2:dd:a4:54:19:2d:1e:be:4b: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:31:21:5C:DB:32:73:B5:31:86:C4:DC:E9:35:27:41:EB:01:C1:BE X509v3 Authority Key Identifier: keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:fc:56:42:e8:7d:d3:c6:c1:94:ce:99:fa:e7:b1:0d:31:bf: 1d:fc:fb:30:fd:4c:e3:10:20:02:6e:6b:0e:29:f2:71:e5:57: a6:ee:42:16:6f:a2:64:09:44:97:77:99:91:7c:25:48:3c:98: 68:06:67:9c:f8:94:52:2f:36:c9:60:a2:15:c2:2c:bd:b8:67: bf:a2:af:11:93:94:18:cb:47:d8:ac:b0:ba:94:38:3d:5f:88: dd:83:d2:b2:10:82:8a:70:f0:d2:cf:0c:83:ad:80:df:aa:ad: 8e:61:72:7a:56:a5:94:03:29:7d:e6:16:5d:f7:a0:91:74:3e: 6a:09:2a:27:96:a0:c9:e5:b4:77:eb:8c:46:16:82:33:d7:00: 13:4c:c1:12:06:68:97:b0:68:fb:8b:e2:e3:2a:c0:0d:12:90: 4a:12:a2:1b:ae:16:ca:f7:41:ac:e9:49:2d:73:5f:73:1e:e4: 7b:c7:99:a1:b0:1a:fd:7d:a0:91:9e:42:38:42:d6:97:77:54: a5:a5:32:f9:a0:bb:db:61:32:c1:cf:10:37:bb:55:b0:d9:bb: 2b:a6:f4:6c:8b:f4:fa:b4:59:ca:43:fd:51:7a:ad:5b:7c:82: 39:f2:75:c9:11:61:4e:3a:47:4f:b0:63:ec:55:f0:63:44:6c: 15:71:6d:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ooEX/LHI3vMJpyBIEon2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOGRkMThiMTY5MmQ4YTNlNzcxMmQzZTZiOTI4YjA5YWEw YWU2NmMwHhcNMjUxMjIwMTIwMTA0WhcNMjUxMjIxMTIwMTA0WjAzMTEwLwYDVQQD EyhlMjMxMjE1Y2RiMzI3M2I1MzE4NmM0ZGNlOTM1Mjc0MWViMDFjMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwyTSUT/ez6Npdib8sgS9vP9a1IZ wQ63QnnrO8rv/rCd8xS/vJVq3nv1UTzIZjl96ayBVQSXQoSO5Wcvz6y+iKFtB9KP ygvUmebIEL+Wqsh3fRZ7xxWyxR9/Qj/84PR8/nma4E7votv9O8VkVqw2tZ6O3t1E 3P40Cs6teFnhn6huq6U/9574GHFX4YJwGJm7XPbkgI4KjG85G00qR0hmPizPPE5t ufv3kuhaJlkw/qgB6+NRGW1NLi86af48UJXGoI+A6MnuqZXL2DEy2AyPyEWRuyuJ tBVwWhiljsqT6QiWJoBSSkk3DkC1/Ekl/y1NiHRQwTGi3aRUGS0evktZOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIxIVzbMnO1MYbE3Ok1J0HrAcG+MB8GA1UdIwQY MBaAFFON0YsWktij53EtPmuSiwmqCuZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUt MmViNzBhMzYwMmU5LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUtMmViNzBhMzYwMmU5 LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3PxWQuh9 08bBlM6Z+uexDTG/Hfz7MP1M4xAgAm5rDinyceVXpu5CFm+iZAlEl3eZkXwlSDyY aAZnnPiUUi82yWCiFcIsvbhnv6KvEZOUGMtH2KywupQ4PV+I3YPSshCCinDw0s8M g62A36qtjmFyelallAMpfeYWXfegkXQ+agkqJ5agyeW0d+uMRhaCM9cAE0zBEgZo l7Bo+4vi4yrADRKQShKiG64WyvdBrOlJLXNfcx7ke8eZobAa/X2gkZ5COELWl3dU paUy+aC722Eywc8QN7tVsNm7K6b0bIv0+rRZykP9UXqtW3yCOfJ1yRFhTjpHT7Bj 7FXwY0RsFXFtgw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:12:15 2025 by rpki-client